webonyx/azure-identity

0.0.1 2023-06-07 14:01 UTC

Requires

• php: ^8.0
• ext-hash: *
• ext-json: *
• psr/cache: ^1.0 || ^2.0 || ^3.0
• psr/log: ^1.0 || ^2.0 || ^3.0
• symfony/cache-contracts: ^1.0 || ^2.0 || ^3.0
• symfony/deprecation-contracts: ^2.1 || ^3.0
• symfony/http-client: ^4.4.16 || ^5.1.7 || ^6.0 || ^7.0
• symfony/http-client-contracts: ^1.1.8 || ^2.0 || ^3.0
• symfony/service-contracts: ^1.0 || ^2.0 || ^3.0

MIT

• Viet Pham

• php
• azure
• identity

README

Azure Active Directory token authentications in PHP

Implemented solutions:

• Client Secret Credential: Local development
• Workload Identity Credential: Azure Kubernetes

Usage

Service Principle

<?php

require_once 'vendor/autoload.php';

// az ad sp create-for-rbac --sdk-auth --name 'azure-identity-dev'

$_SERVER['AZURE_TENANT_ID'] = 'f7ee1891-8c7e-487d-9267-ea5fb5b3a5bc';
$_SERVER['AZURE_CLIENT_ID'] = 'ca76a582-01ea-4c6c-8249-669f79883f2e';
//$_SERVER['AZURE_CLIENT_SECRET'] = 'REDACTED'; Must be pre-set from environment

use Azure\Identity\Credential\DefaultAzureCredential;
use Azure\Identity\Exception\CredentialUnavailableException;

$credential = new DefaultAzureCredential();

try {
    $token = $credential->getToken(['https://servicebus.azure.net//.default']);
    var_dump($token);
} catch (CredentialUnavailableException $exception) {
    print_r([
        'message' => $exception->getMessage(),
        'location' => sprintf('%s:%d', $exception->getFile(), $exception->getLine()),
    ]);
}

Workload Identity

$_SERVER['AZURE_TENANT_ID'] = 'f7ee1891-8c7e-487d-9267-ea5fb5b3a5bc';
$_SERVER['AZURE_CLIENT_ID'] = 'ca76a582-01ea-4c6c-8249-669f79883f2e';
$_SERVER['AZURE_FEDERATED_TOKEN_FILE'] = 'sample/azure-identity-token';

use Azure\Identity\Credential\DefaultAzureCredential;
use Azure\Identity\Exception\CredentialUnavailableException;

$credential = new DefaultAzureCredential();

try {
    $token = $credential->getToken(['https://servicebus.azure.net//.default']);
    var_dump($token);
} catch (CredentialUnavailableException $exception) {
    print_r([
        'message' => $exception->getMessage(),
        'location' => sprintf('%s:%d', $exception->getFile(), $exception->getLine()),
    ]);
}